Footer

Your go-to destination for discovering trending open-source projects and uncovering the insights that matter

Legal

  • Terms and conditions
  • Privacy policy

More

  • Pricing
  • Advertise
  • onedump
  • gosnakego
  • Contact us

Social

  • X (Twitter)
  • GitHub
Trendshift owl
What they build speaks louder than words
© 2026 Trendshift, created by Julian Li with ❤️
SignalAdvertise
Trendshift
SignalAdvertise
Sign in
Trendshift owl

Discover trends that matter

DailyWeeklyMonthlyYearly
Live mentionsTopics
RepositoriesDevelopers
InsightsStats
Busbar
Busbar
Bifrost
Bifrost
AxiomCode
AxiomCode

NVIDIA/SkillSpector

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

Visit GitHub
Python
20.5k
1.9k
3 contributors
Apache License 2.0
website
AchievementsView all →
FeaturedAdvertise to 180K+ monthly visitors
Busbar

Control what AI can do before it acts

Bifrost

Enterprise AI Gateway Built For Scale: Route, Govern, and Secure All Your AI Traffic

AxiomCode

Give Al Agents a Deeper Understanding of Your Codebase with a Code Graph

Momentum

How fast NVIDIA/SkillSpector is gaining stars, and where it lands on Trendshift and GitHub Trending

Activity and trending

Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending

Aug 20 – Oct 19, 2026

Stars +5,738 in 61 days

0100200300
273

Forks +615 in 61 days

0102030
26

Merged PRs 244 in 61 days

0102030
27

Trendshift Trendingwhere the repository ranked each day it made the top 25

Top 25 in Python

13
Aug 20Aug 28Sep 5Sep 13Sep 21Sep 29Oct 7Oct 15
The left and right arrow keys step from day to day; Home and End go to the first and the last

Stars, forks, merged pull requests and Trendshift Trending rank, by day
DayStars gainedForks gainedMerged PRsPython
Thu, Aug 20, 2026+38+217Not trending
Fri, Aug 21, 2026+30+43Not trending
Sat, Aug 22, 2026+24+20Not trending
Sun, Aug 23, 2026+35+100Not trending
Mon, Aug 24, 2026+29+15Not trending
Tue, Aug 25, 2026+26+42Not trending
Wed, Aug 26, 2026+42+44Not trending
Thu, Aug 27, 2026+35+71Not trending
Fri, Aug 28, 2026+73+67Not trending
Sat, Aug 29, 2026+84+50Not trending
Sun, Aug 30, 2026+115+151Not trending
Mon, Aug 31, 2026+127+163Not trending
Tue, Sep 1, 2026+100+70Not trending
Wed, Sep 2, 2026+143+190Not trending
Thu, Sep 3, 2026+195+180Not trending
Fri, Sep 4, 2026+273+260#13
Sat, Sep 5, 2026+138+130Not trending
Sun, Sep 6, 2026+113+131Not trending
Mon, Sep 7, 2026+153+171Not trending
Tue, Sep 8, 2026+124+60Not trending
Wed, Sep 9, 2026+107+123Not trending
Thu, Sep 10, 2026+105+101Not trending
Fri, Sep 11, 2026+74+90Not trending
Sat, Sep 12, 2026+68+127Not trending
Sun, Sep 13, 2026+55+80Not trending
Mon, Sep 14, 2026+103+62Not trending
Tue, Sep 15, 2026+141+82Not trending
Wed, Sep 16, 2026+122+1623Not trending
Thu, Sep 17, 2026+187+145Not trending
Fri, Sep 18, 2026+119+196Not trending
Sat, Sep 19, 2026+80+110Not trending
Sun, Sep 20, 2026+76+90Not trending
Mon, Sep 21, 2026+66+97Not trending
Tue, Sep 22, 2026+123+175Not trending
Wed, Sep 23, 2026+69+712Not trending
Thu, Sep 24, 2026+47+40Not trending
Fri, Sep 25, 2026+78+100Not trending
Sat, Sep 26, 2026+73+171Not trending
Sun, Sep 27, 2026+63+50Not trending
Mon, Sep 28, 2026+78+1119Not trending
Tue, Sep 29, 2026+126+92Not trending
Wed, Sep 30, 2026+158+141Not trending
Thu, Oct 1, 2026+159+150Not trending
Fri, Oct 2, 2026+145+137Not trending
Sat, Oct 3, 2026+159+210Not trending
Sun, Oct 4, 2026+120+1413Not trending
Mon, Oct 5, 2026+72+527Not trending
Tue, Oct 6, 2026+108+814Not trending
Wed, Oct 7, 2026+81+103Not trending
Thu, Oct 8, 2026+74+64Not trending
Fri, Oct 9, 2026+66+127Not trending
Sat, Oct 10, 2026+93+70Not trending
Sun, Oct 11, 2026+73+150Not trending
Mon, Oct 12, 2026+110+61Not trending
Tue, Oct 13, 2026+75+113Not trending
Wed, Oct 14, 2026+75+615Not trending
Thu, Oct 15, 2026+87+62Not trending
Fri, Oct 16, 2026+79+107Not trending
Sat, Oct 17, 2026+59+80Not trending
Sun, Oct 18, 2026+60+90Not trending
Mon, Oct 19, 2026+28+10Not trending
Total+5,738+615244
  • 1#1 on the list
  • 7Rank that day
  • Not trending
2

    • GitHub trending history

    Where the repository ranked on GitHub Trending, one dot for each day it was on a list

    Jun 11 – Jun 16, 2026Best #5

    #1#5#10#15#20#25
    Top 10
    Jul 2026AugSepOct
    The left and right arrow keys step from day to day; Home and End go to the first and the last

    Mentions and achievements

    Where people are talking about NVIDIA/SkillSpector, and every badge it has earned
    1. Oct 151 post

      • 9 月 GitHub 超顶的 20 个开源项目里，这 5 个值得先收藏： 1. Archify 把文字描述或代码仓库变成交互式架构图。 2. Hindsight 给 AI Agent 增加长期记忆，不用每次重新交代背景。 3. WeKnora 腾讯开源的知识库工具，让 AI 根据团队文档回答问题。 4. Cua 让 Agent 操作电脑、浏览器和桌面软件。 5. SkillSpector…

        Read full on X, posted by @CY160909

        @CY160909 · x.com

    2. Oct 121 post

      • 装 Agent Skill 前先扫：NVIDIA 开源 SkillSpector，查 Claude Code / Codex / MCP skill 的注入、外泄、供应链风险。 研究子集自述：约 26% 有漏洞，约 5% 疑似恶意意图。约 2.0 万星。

        Read full on X, posted by @xzcemoik

        @xzcemoik · x.com

    3. Oct 111 post

      • 装别人写的 Agent Skill 前，先查它会不会乱读文件或偷发数据。 NVIDIA 的 SkillSpector 能扫仓库和本地目录，检查提示词注入、数据外传等风险。 它会给风险分数和报告，适合在团队安装新 Skill 前做一道筛查。 扫描通过后，仍要看它实际申请的权限.

        Read full on X, posted by @Aoyi21

        @Aoyi21 · x.com

    4. Oct 101 post

      • 10 OSS repos that turn Claude Code Into a Beast

        Read full on Reddit

        r/WebAfterAI

    5. Oct 81 post

      • An AI agent skill can contain scripts as well as written instructions. NVIDIA's SkillSpector checks both for security risks before you install it. It looks for hidden commands, code that collects…

        Read full on X, posted by @agenticgirl

        @agenticgirl · x.com

    6. Oct 61 post

      • 2/3 6 Archify 7 Last30Days 8 OpenMontage 9 Humanizer 10 i-have-adhd

        Read full on X, posted by @denziideng

        @denziideng · x.com

    7. Oct 22 posts

      • 来感受一下 NVIDIA 开源的 Skill 扫描器 SkillSpector 的中文水平 🤣 同一个偷密钥的 Skill，英文版判「不要安装」，翻成中文只剩「谨慎」了 装 Skill 前把仓库丢给它，能打出 0~100 的风险分。我用纯静态模式试了一下，两份 Skill 都让 AI 读 SSH 私钥和 .env 发到外面，英文版 55 分，中文版 35…

        Read full on X, posted by @yupi996

        @yupi996 · x.com

      • 窝趣！Hermes Agent 最近公布了10个超强的 Skill ！ 我收集了一下，分享给大家！ 1、Superpowers 地址： 这个Skill是给编程 Agent 加一套流程。 先拆需求，再写代码，跑测试，最后检查。它不会一上来就改很多文件，比较稳。 2、Claude-Mem 地址： 给 Agent 加上长期的记忆。…

        Read full on X, posted by @qihang_zeng6688

        @qihang_zeng6688 · x.com

    8. Sep 281 post

      • Their own research cut on a 31,132-skill subset: about 26% had vulnerabilities, and about 5% looked malicious. That is their sample, not a claim about every skill on the internet. Static mode runs…

        Read full on X, posted by @LikelyMalware

        @LikelyMalware · x.com

    9. Sep 251 post

      • Context: mattpocock/skills (~269k ⭐) and obra/superpowers (~291k) proved distribution is solved. Users now pick skills by author brand, not feature lists. Everyone has skills. Nobody trusts them.

        Read full on X, posted by @primotry

        @primotry · x.com

    You might also like

    Repositories close to NVIDIA/SkillSpector
    FeaturedAdvertise to 180K+ monthly visitors
    AxiomCode

    Give Al Agents a Deeper Understanding of Your Codebase with a Code Graph

    Bifrost

    Enterprise AI Gateway Built For Scale: Route, Govern, and Secure All Your AI Traffic

    Busbar

    Control what AI can do before it acts

    cisco-ai-defense/skill-scanner

    Python

    Security Scanner for Agent Skills

    2.6k345

    berabuddies/Semia

    Python

    Semia, security audit for AI agent skills.

    61370

    alexgreensh/repo-forensics

    Python

    Offline security scanner for AI-agent repos, skills, plugins, and MCP servers.

    19432

    getagentseal/agentseal

    Python

    Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply chain attacks, test prompt injection resistance, and audit live MCP servers for tool poisoning.

    37774

    affaan-m/agentshield

    TypeScript

    AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️

    1.3k301

    HeadyZhang/agent-audit

    Python

    Static security scanner for LLM agents — prompt injection, MCP config auditing, taint analysis. 51 rules mapped to OWASP Agentic Top 10 (2026). Works with LangChain, CrewAI, AutoGen.

    24030

    asamassekou10/ship-safe

    JavaScript

    The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output.

    860122

    splx-ai/agentic-radar

    Python

    A security scanner for your LLM agentic workflows

    1.1k157

    GoPlusSecurity/agentguard

    TypeScript

    Security guard for AI agents — blocks malicious skills, prevents data leaks, protects secrets. 24 detection rules, runtime action evaluation, trust registry.

    47169